Terms of Service

Effective Date: 13 January 2026 Version: 1.0 Jurisdiction: Switzerland

1. Definitions

For the purposes of these Terms of Service, the following definitions shall apply:

"Service" refers to the Convro encrypted messaging application, including all associated software (mobile applications for iOS and Android), backend infrastructure, servers, cryptographic protocols, and related services provided by the Operator.

"Operator" or "We" or "Convro" refers to Convro Ltd, a company incorporated under the laws of the United Kingdom, which operates the Service with data processing infrastructure located in Switzerland.

"User" or "You" refers to any individual who accesses, downloads, installs, or uses the Service in any capacity.

"Account" refers to the unique digital identity created upon registration, consisting of cryptographic key pairs generated locally on the User's device and an assigned Convro Virtual Number.

"Convro Virtual Number" refers to the permanent unique identifier assigned to each Account in the format +99 XXX XXX, which serves as the User's identity within the Service and cannot be changed or transferred.

"Device" refers to any smartphone, tablet, or other electronic device on which the Service is installed and operated.

"Content" refers to any and all data, text, messages, images, audio, video, files, or other information transmitted, shared, or stored through the Service.

"C6P" or "Convro6Protocol" refers to the proprietary end-to-end encryption protocol developed by Convro, implementing cryptographic primitives including X25519 key agreement, Ed25519 signatures, ChaCha20-Poly1305 AEAD encryption, and HKDF-SHA256 key derivation.

"Sealed Sender" refers to the cryptographic mechanism by which the identity of message senders is concealed from the Service's servers.

"Terms" refers to these Terms of Service, including any amendments, modifications, or supplements published by the Operator.

2. Acceptance of Terms

By downloading, installing, accessing, or using the Convro Service in any manner, You acknowledge that You have read, understood, and agree to be legally bound by these Terms of Service in their entirety. This agreement constitutes a legally binding contract between You and the Operator.

If You do not agree to these Terms, You must immediately cease all use of the Service, uninstall any Convro applications from Your devices, and refrain from accessing the Service in the future.

Your continued use of the Service following the posting of any changes to these Terms constitutes Your acceptance of such changes. It is Your responsibility to review these Terms periodically for updates.

3. Service Operator

The Convro Service is operated by:

Convro Ltd Registered in England and Wales
Companies House Registration Number: [To be inserted upon registration]
Data Processing Location: Switzerland

While the Operator is incorporated in the United Kingdom, all data processing infrastructure, including servers handling message routing and temporary data storage, is located exclusively within the Swiss Confederation. This jurisdictional structure ensures that User data benefits from the robust privacy protections afforded by Swiss law.

The Operator has deliberately chosen Switzerland as the location for its technical infrastructure due to Switzerland's constitutional protection of privacy (Article 13 of the Swiss Federal Constitution), its comprehensive data protection legislation, and its position outside the European Union's direct regulatory jurisdiction while maintaining adequacy decisions for data protection purposes.

4. Service Description

Convro is a secure, end-to-end encrypted messaging service designed to protect the privacy and confidentiality of User communications. The Service provides:

4.1 Core Functionality

Private one-to-one messaging with full end-to-end encryption using the proprietary Convro6Protocol (C6P). All message content, including text, images, video, and files, is encrypted on the sender's device and can only be decrypted by the intended recipient.

4.2 Privacy-Preserving Architecture

The Service implements multiple layers of metadata protection, including but not limited to: Sealed Sender technology preventing server-side identification of message originators; fixed 64KB message padding eliminating traffic analysis based on message size; timestamp rounding to 5-minute intervals with random jitter of 0-5 seconds preventing timing correlation attacks.

4.3 Media Transmission

Users may transmit images, videos, and files through the Service. All media is encrypted using the same end-to-end encryption standards as text messages and is temporarily stored on Swiss servers only for the duration necessary to complete delivery.

4.4 Multi-Device Architecture

The Service supports operation across multiple devices. Each device maintains its own independent cryptographic key pairs. Messages are not synchronized between devices; each device receives and stores only the messages received while that specific device was registered and active.

4.5 Open Source Commitment

The Convro6Protocol specification and the source code for iOS and Android client applications are published under open source licenses, enabling independent security auditing and verification of our privacy claims.

4.6 Service Availability

The Service is provided free of charge. The Operator makes no guarantees regarding continuous availability, uptime, or uninterrupted service. The Service may be modified, suspended, or discontinued at any time without prior notice.

5. Eligibility and Registration

5.1 Age Requirement

You must be at least sixteen (16) years of age to use the Convro Service. By using the Service, You represent and warrant that You meet this age requirement. The Operator does not knowingly collect information from or provide services to individuals under the age of 16.

5.2 Registration Process

Account registration does not require the provision of any personally identifiable information. The registration process consists exclusively of:

5.3 No Identity Verification

The Operator does not collect, require, or verify: email addresses, telephone numbers, government-issued identification, real names, physical addresses, IP addresses, or any other personally identifiable information. The Service is designed to operate without linking User accounts to real-world identities.

5.4 Age Verification Limitation

Due to the privacy-preserving design of the Service, the Operator cannot verify the actual age of Users. The age requirement is enforced through User declaration upon acceptance of these Terms. Parents and guardians are responsible for monitoring their children's use of electronic devices and services.

6. Account and Security

6.1 Account Characteristics

Your Convro Account is uniquely identified by your Convro Virtual Number, which is permanently assigned at registration and cannot be changed, transferred, or reassigned under any circumstances. This number serves as your sole identifier within the Service ecosystem.

6.2 Cryptographic Keys

All cryptographic keys associated with Your Account are generated exclusively on Your local device and never transmitted to or stored on Convro servers in unencrypted form. You are solely responsible for the security of Your devices and the cryptographic keys stored thereon.

6.3 Device Security

You bear complete responsibility for:

6.4 No Account Recovery

Due to the zero-knowledge architecture of the Service, the Operator cannot recover, reset, or restore access to Your Account under any circumstances. If You lose access to Your device or cryptographic keys, Your Account and all associated message history will be permanently inaccessible. The Operator expressly disclaims any obligation to provide account recovery services.

6.5 Prohibition on Credential Sharing

You may not share, transfer, sell, or otherwise provide access to Your Account to any third party. Each Account is intended for use by a single individual only.

7. Privacy and Data Processing

7.1 Data Minimization Principle

The Convro Service is architected according to the principle of data minimization as established in Article 6(2) of the Swiss Federal Act on Data Protection (DSG). We collect and process only the absolute minimum data technically necessary to provide the Service.

7.2 Data We Do NOT Collect

The Operator explicitly does not collect, store, or have access to:

7.3 Data We Process

The following data is processed transiently to enable message delivery:

7.4 Data Processing Location

All data processing occurs exclusively on servers located within the Swiss Confederation. No User data is transferred to, processed in, or accessible from any jurisdiction outside of Switzerland.

7.5 Legal Framework

7.6 No Third-Party Data Sharing

The Operator does not sell, rent, lease, trade, or otherwise share any User data with third parties for any purpose, including but not limited to marketing, advertising, analytics, or commercial purposes.

7.7 Law Enforcement Requests

In the event of a legally valid request from Swiss authorities pursuant to Swiss law, the Operator will comply to the extent technically possible. However, due to the end-to-end encryption and zero-knowledge architecture, the Operator is technically unable to provide message content, sender identity for received messages, precise timestamps, or social graph information. The Operator will notify affected Users of such requests unless legally prohibited from doing so.

8. Encryption and Technical Architecture

8.1 Convro6Protocol (C6P)

All communications through the Service are protected by the Convro6Protocol, a proprietary end-to-end encryption protocol implementing the following cryptographic primitives:

8.2 Sealed Sender

The Service implements Sealed Sender technology, ensuring that message sender identity is cryptographically hidden from Convro servers. The server can identify only the intended recipient for routing purposes; the sender's identity is revealed only to the recipient upon decryption.

8.3 Metadata Protection

The Service implements comprehensive metadata protection measures:

8.4 Technical Limitations Acknowledgment

You acknowledge that while the Service implements state-of-the-art encryption and privacy protections, no security system is impenetrable. The Operator does not warrant that the Service will be immune to all possible attacks, vulnerabilities, or exploits. Cryptographic standards may evolve, and vulnerabilities may be discovered in currently-secure algorithms.

9. User Conduct and Prohibited Activities

9.1 General Conduct Standards

You agree to use the Service only for lawful purposes and in accordance with these Terms. You are solely responsible for ensuring that Your use of the Service complies with all applicable laws and regulations in Your jurisdiction.

9.2 Prohibited Activities

You expressly agree NOT to use the Service to:

9.3 No Content Monitoring

Due to the end-to-end encrypted nature of the Service, the Operator does not and cannot monitor, review, or access the content of User communications. The Operator relies on User reports and cooperation with law enforcement to address violations of these Terms.

9.4 Reporting Mechanism

Users may report suspected violations of these Terms through the in-app reporting mechanism or by contacting KillTheBug@convro.eu. The Operator will investigate reports to the extent technically possible and cooperate with law enforcement authorities where legally required.

10. User Content and Responsibility

10.1 Ownership of Content

You retain all ownership rights in any Content You transmit through the Service. The Operator claims no ownership interest in User Content.

10.2 User Responsibility

You are solely and exclusively responsible for all Content You transmit, share, or store through the Service. You represent and warrant that:

10.3 No Content Backup

The Service does not provide content backup, export, or archival functionality. Message history exists only on the local device where messages were received. If You change devices, message history will not transfer. The Operator has no ability to recover lost messages.

10.4 No Operator Liability for Content

The Operator has no knowledge of, control over, or responsibility for Content transmitted through the Service. The Operator expressly disclaims all liability for User Content, including but not limited to claims arising from defamation, intellectual property infringement, privacy violations, or illegal content.

11. Intellectual Property

11.1 Convro Intellectual Property

The Convro name, logo, visual design, and proprietary components of the Service are protected by copyright, trademark, and other intellectual property laws. All rights not expressly granted herein are reserved by the Operator.

11.2 Open Source Components

The Convro6Protocol specification and client application source code (iOS and Android) are released under open source licenses. The specific license terms governing these components are available in the respective source code repositories. Nothing in these Terms restricts Your rights under applicable open source licenses.

11.3 License to Use Service

Subject to Your compliance with these Terms, the Operator grants You a limited, non-exclusive, non-transferable, revocable license to download, install, and use the Service applications on devices You own or control, solely for Your personal, non-commercial use.

11.4 Restrictions

Except as expressly permitted by applicable open source licenses, You may not:

12. Voluntary Contributions

12.1 Free Service

The Convro Service is provided free of charge. No payment is required for account creation, messaging, or any core functionality of the Service.

12.2 Voluntary Donations

Users may, at their sole discretion, make voluntary financial contributions to support the development and operation of the Service through anonymous Bitcoin donations. Such contributions are entirely optional and do not affect access to or functionality of the Service.

12.3 Early Contributor Recognition

Users who make significant voluntary contributions, as determined in the sole discretion of the Operator, may receive a non-transferable "Early Contributor" badge displayed within the application. This recognition is provided as a gesture of appreciation and does not constitute a purchase, entitle the contributor to any additional services or features, or create any contractual obligation on the part of the Operator.

12.4 Non-Refundable Nature

All voluntary contributions are final and non-refundable. Due to the anonymous nature of cryptocurrency donations, refunds are technically impossible.

13. Termination and Account Deletion

13.1 Termination by User

You may terminate Your use of the Service at any time by uninstalling the application from Your devices. Due to the zero-knowledge architecture, simply uninstalling the application effectively terminates Your Account as the Operator retains no User-identifiable information.

13.2 Critical Data Wipe Function

The Service provides an emergency account deletion function accessible through application settings. Upon activation (requiring biometric confirmation), this function immediately and irreversibly:

This action is permanent and irreversible. The Operator cannot restore accounts or data deleted through this function.

13.3 Termination by Operator

The Operator reserves the right to suspend or terminate Your access to the Service, without prior notice, if:

13.4 Effect of Termination

Upon termination for any reason, Your license to use the Service immediately terminates. Sections of these Terms that by their nature should survive termination shall survive, including but not limited to: Disclaimer of Warranties, Limitation of Liability, Indemnification, Governing Law, and Dispute Resolution.

13.5 Messages to Terminated Accounts

Messages sent to deleted or terminated accounts cannot be delivered and will be discarded by the server after the standard temporary retention period expires.

14. Disclaimer of Warranties

14.1 "As Is" and "As Available" Basis

THE SERVICE IS PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED. TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, THE OPERATOR EXPRESSLY DISCLAIMS ALL WARRANTIES, INCLUDING BUT NOT LIMITED TO:

14.2 No Warranty of Security

While the Service implements strong encryption and privacy protections, THE OPERATOR DOES NOT WARRANT THAT THE SERVICE IS IMPENETRABLE, THAT COMMUNICATIONS CANNOT BE INTERCEPTED, OR THAT THE CRYPTOGRAPHIC PROTOCOLS EMPLOYED ARE OR WILL REMAIN SECURE. Cryptographic vulnerabilities may be discovered, and no encryption system provides absolute security.

14.3 No Warranty of Availability

THE OPERATOR DOES NOT WARRANT CONTINUOUS, UNINTERRUPTED, OR SECURE ACCESS TO THE SERVICE. The Service may be unavailable due to maintenance, technical issues, cyberattacks, force majeure events, or other circumstances beyond the Operator's control.

14.4 User Assumption of Risk

YOU EXPRESSLY ACKNOWLEDGE AND AGREE THAT YOUR USE OF THE SERVICE IS AT YOUR SOLE RISK. You assume full responsibility for any consequences arising from Your use of the Service.

15. Limitation of Liability

15.1 Exclusion of Damages

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL THE OPERATOR, ITS DIRECTORS, OFFICERS, EMPLOYEES, AGENTS, PARTNERS, OR AFFILIATES BE LIABLE FOR ANY:

THESE LIMITATIONS APPLY REGARDLESS OF THE LEGAL THEORY UPON WHICH DAMAGES ARE SOUGHT, WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY, OR OTHERWISE, AND EVEN IF THE OPERATOR HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

15.2 Aggregate Liability Cap

TO THE EXTENT THAT THE FOREGOING EXCLUSIONS DO NOT APPLY, THE OPERATOR'S TOTAL AGGREGATE LIABILITY TO YOU FOR ALL CLAIMS ARISING FROM OR RELATED TO THE SERVICE SHALL NOT EXCEED ONE HUNDRED SWISS FRANCS (CHF 100.00).

15.3 Essential Purpose

THE LIMITATIONS OF LIABILITY SET FORTH HEREIN ARE FUNDAMENTAL ELEMENTS OF THE BASIS OF THE BARGAIN BETWEEN THE OPERATOR AND YOU. THE SERVICE WOULD NOT BE PROVIDED WITHOUT SUCH LIMITATIONS.

15.4 Jurisdictional Limitations

Some jurisdictions do not allow the exclusion or limitation of certain damages. In such jurisdictions, the Operator's liability shall be limited to the maximum extent permitted by applicable law.

16. Indemnification

16.1 Indemnification Obligation

You agree to defend, indemnify, and hold harmless the Operator, its directors, officers, employees, agents, licensors, and service providers from and against any and all claims, liabilities, damages, judgments, awards, losses, costs, expenses, and fees (including reasonable attorneys' fees) arising out of or relating to:

16.2 Cooperation

The Operator reserves the right to assume the exclusive defense and control of any matter subject to indemnification by You, in which event You agree to cooperate with the Operator in asserting any available defenses.

16.3 Notice

The Operator will provide You with prompt written notice of any claim subject to indemnification, provided that failure to provide such notice shall not relieve You of Your indemnification obligations except to the extent that such failure materially prejudices Your ability to defend the claim.

17. Governing Law and Jurisdiction

17.1 Choice of Law

These Terms of Service and any dispute arising out of or in connection with them or the Service shall be governed by and construed in accordance with the substantive laws of Switzerland, without regard to its conflict of laws principles.

17.2 Exclusive Jurisdiction

Subject to the arbitration provisions below, the courts of the Canton of Zurich, Switzerland shall have exclusive jurisdiction over any disputes arising out of or relating to these Terms or the Service. You hereby irrevocably submit to the personal jurisdiction of such courts and waive any objection based on inconvenient forum.

17.3 Exclusion of Conflict of Laws

The United Nations Convention on Contracts for the International Sale of Goods (CISG) shall not apply to these Terms or any transaction conducted through the Service.

18. Dispute Resolution

18.1 Informal Resolution

Before initiating any formal dispute resolution proceedings, You agree to first contact the Operator at KillTheBug@convro.eu and attempt to resolve any dispute informally for a period of at least thirty (30) days. Most disputes can be resolved through good-faith communication.

18.2 Arbitration

If informal resolution is unsuccessful, any dispute, controversy, or claim arising out of or in connection with these Terms, including any question regarding their existence, validity, or termination, shall be resolved by binding arbitration administered by the Swiss Chambers' Arbitration Institution in accordance with the Swiss Rules of International Arbitration.

18.3 Arbitration Conditions

18.4 Class Action Waiver

YOU AGREE THAT ANY DISPUTE RESOLUTION PROCEEDINGS WILL BE CONDUCTED ONLY ON AN INDIVIDUAL BASIS AND NOT IN A CLASS, CONSOLIDATED, OR REPRESENTATIVE ACTION. You hereby waive any right to participate in any class action lawsuit or class-wide arbitration against the Operator.

18.5 Injunctive Relief

Notwithstanding the foregoing, the Operator may seek injunctive or other equitable relief in any court of competent jurisdiction to protect its intellectual property rights or prevent irreparable harm.

19. Modifications to Terms

19.1 Right to Modify

The Operator reserves the right to modify, amend, or update these Terms of Service at any time, in its sole discretion. Any modifications shall be effective immediately upon posting the revised Terms within the Service or on the Operator's website.

19.2 Notice of Material Changes

For material changes that significantly affect Your rights or obligations, the Operator will endeavor to provide notice through the Service application or other reasonable means at least fourteen (14) days before such changes take effect.

19.3 Continued Use as Acceptance

Your continued use of the Service after any modifications to these Terms constitutes Your acceptance of the revised Terms. If You do not agree to the revised Terms, Your sole remedy is to discontinue use of the Service.

19.4 Version History

The current version of these Terms, including the effective date, will always be available within the Service and on the Operator's website. Previous versions may be requested by contacting the Operator.

20. Severability

If any provision of these Terms is held to be invalid, illegal, or unenforceable by a court of competent jurisdiction, such invalidity, illegality, or unenforceability shall not affect any other provision of these Terms. The remaining provisions shall continue in full force and effect.

If any provision is held to be invalid, illegal, or unenforceable, the parties agree that such provision shall be modified to the minimum extent necessary to make it valid, legal, and enforceable while preserving the intent of the parties. If such modification is not possible, the provision shall be severed, and the remaining Terms shall be interpreted to give effect to the intent of the parties to the maximum extent possible.

21. Force Majeure

The Operator shall not be liable for any failure or delay in performing its obligations under these Terms if such failure or delay results from circumstances beyond its reasonable control, including but not limited to:

In the event of a force majeure, the Operator's obligations shall be suspended for the duration of such event, and the time for performance shall be extended accordingly.

22. Entire Agreement

22.1 Complete Agreement

These Terms of Service, together with the Privacy Policy (when published), constitute the entire agreement between You and the Operator concerning the Service and supersede all prior or contemporaneous communications, representations, or agreements, whether oral or written, relating to the Service.

22.2 No Waiver

The failure of the Operator to enforce any provision of these Terms shall not constitute a waiver of such provision or the right to enforce it at a later time. Any waiver must be in writing and signed by an authorized representative of the Operator.

22.3 Assignment

You may not assign or transfer Your rights or obligations under these Terms without the prior written consent of the Operator. The Operator may assign its rights and obligations under these Terms without restriction, including in connection with any merger, acquisition, sale of assets, or by operation of law.

22.4 No Third-Party Beneficiaries

These Terms are intended solely for the benefit of the parties hereto and do not create any rights in any third party.

22.5 Headings

The section headings in these Terms are for convenience only and have no legal or contractual effect.

22.6 Language

These Terms are drafted in English. In the event of any conflict between the English version and any translation, the English version shall prevail.

23. Contact Information

For questions, concerns, or notices regarding these Terms of Service or the Convro Service, please contact:

Convro Ltd
Security and Legal Inquiries: KillTheBug@convro.eu

Response Times: The Operator endeavors to respond to all inquiries within a reasonable timeframe, though response times may vary based on volume and complexity of inquiries.

For security vulnerabilities or urgent security matters, please include "[SECURITY]" in the subject line of Your email to ensure prompt attention.

End of Terms of Service

Last Updated: 13 January 2026 | Version 1.0
© 2026 Convro Ltd. All rights reserved.